Analysis
-
max time kernel
141s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26-07-2024 16:43
General
-
Target
74e006106449f76ec42f5f33cabe8467_JaffaCakes118.exe
-
Size
2.6MB
-
MD5
74e006106449f76ec42f5f33cabe8467
-
SHA1
7951aba32240b5d1158140448228660f8151218c
-
SHA256
25224b6c50baacec829bc9c28fbe7e80930857b536d0c8d3bd93a585e60bc0c1
-
SHA512
97db5a02de1d28bdccbc9ef9bb2764121b42b548b85d825b6c4e16e6944c479b8f109b80f75a654552088d7ab23162fc12f82b960ebdc1175b10f0868a739af5
-
SSDEEP
49152:PvpvqWOS0B7uN2UeqzSqujdRfzAIxve4DVdyDI64nw3Vx3PPGEg7zS2LO:PhvqWOS0B7uNeqzSqujDfzAIxW4jyDIm
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74e006106449f76ec42f5f33cabe8467_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\74e006106449f76ec42f5f33cabe8467_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
28KB
-
Filesize
1.5MB
-
Filesize
4KB
-
Filesize
1.5MB
-
Filesize
4KB